Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/792BA6283AAC11EF93D3E072C4F9AE02.roa
File:                     792BA6283AAC11EF93D3E072C4F9AE02.roa (raw, json)
Hash identifier:          mhtaJ9VKvC+6qjyUXC3Bc+4DS8AlQFeD5Yr6NX6VftM=
Subject key identifier:   24:89:6A:01:2A:D7:AE:EF:F5:D4:97:F0:61:C5:BA:B7:DD:4D:A6:6D
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       2123
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/792BA6283AAC11EF93D3E072C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 16:32:17 +0000
ROA not before:           Wed 30 Sep 2026 16:32:17 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     64079
IP address blocks:        203.56.50.0/24 maxlen: 24
                          203.56.51.0/24 maxlen: 24
                          203.86.118.0/24 maxlen: 24
                          203.86.119.0/24 maxlen: 24
                          203.86.120.0/24 maxlen: 24
                          203.86.121.0/24 maxlen: 24
                          203.86.122.0/24 maxlen: 24
                          203.86.123.0/24 maxlen: 24
                          203.86.124.0/24 maxlen: 24
                          203.86.125.0/24 maxlen: 24
                          220.247.138.0/24 maxlen: 24
                          220.247.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8483 (0x2123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Sep 30 16:32:17 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd3991-94a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:fc:75:f9:f6:f3:93:09:6b:91:b9:4c:76:
                    bd:30:2f:0f:62:6b:18:7c:2f:de:3f:bb:0c:0f:05:
                    c4:da:af:ac:ee:9a:ab:8f:36:0a:6c:8e:14:c9:97:
                    d5:fb:a3:8b:db:90:9b:18:e6:b5:4a:bf:cb:28:56:
                    1c:38:4f:27:71:26:e2:b3:68:5b:62:78:17:9f:63:
                    2c:00:89:0c:06:f4:93:21:82:9d:f3:2b:72:9b:31:
                    10:55:9e:32:2f:fa:f8:65:30:ed:02:ea:d9:d0:ed:
                    ef:e0:26:e4:96:84:db:14:bd:17:1d:fd:eb:8c:a8:
                    02:56:00:99:83:91:66:ed:6b:2a:ea:24:6c:4c:ea:
                    cc:61:e4:12:35:ef:ab:f6:fe:cb:18:e3:07:7b:35:
                    27:07:f0:36:2d:a8:a8:a8:9f:5d:d9:14:80:32:c8:
                    d2:3d:0d:f6:e1:43:4e:ef:cc:b4:a9:12:81:5c:1c:
                    bf:76:1c:99:35:32:fb:67:3c:f3:9e:52:a3:af:2a:
                    6d:90:8a:f7:f8:6a:31:85:6f:3a:11:8e:aa:2b:a6:
                    34:7a:15:2c:fa:34:41:b4:12:f9:ff:45:9e:8d:d7:
                    8a:e5:1b:a5:cb:46:f5:59:bf:a0:c2:cd:93:ff:65:
                    3a:46:6d:2d:65:85:2f:fc:c2:02:b3:e4:df:ce:0a:
                    ef:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:89:6A:01:2A:D7:AE:EF:F5:D4:97:F0:61:C5:BA:B7:DD:4D:A6:6D
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/792BA6283AAC11EF93D3E072C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.56.50.0/23
                  203.86.118.0-203.86.125.255
                  220.247.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:87:3b:ad:f6:bf:4b:a1:76:f6:8a:f7:c5:91:7d:a6:f0:55:
         79:87:64:a9:61:6b:80:83:88:ba:73:74:71:63:5e:82:15:47:
         d8:67:fc:8f:b6:6b:48:25:de:e3:4e:96:8a:af:0b:b0:62:96:
         d2:71:e3:70:08:aa:fe:56:87:d5:89:da:dc:dc:fb:eb:c2:f3:
         91:06:45:eb:a1:65:27:4d:36:9b:3f:58:d1:f2:54:2e:84:c1:
         8b:40:7b:71:0e:06:03:3d:80:14:f8:fa:37:12:ca:c3:5d:fa:
         36:b7:74:12:d8:29:1c:2a:24:30:41:96:a9:14:f7:06:f3:2c:
         14:d7:0e:b9:f2:fc:69:dc:35:cc:a5:9e:49:88:bf:61:cf:a6:
         9f:10:06:59:cb:fa:52:e8:1c:25:79:90:2a:d3:7d:bc:8a:c2:
         77:88:00:cf:98:ce:71:c5:81:b3:22:23:3f:58:1a:ce:a1:ab:
         e8:a8:37:c1:6c:2f:66:25:a7:57:8a:0d:70:6b:d1:9d:80:61:
         c3:2b:c0:ca:95:ae:55:93:b5:a5:64:46:a6:67:aa:17:8e:c6:
         2a:36:c1:eb:00:43:63:78:19:e2:8c:a3:56:16:0e:ef:be:d7:
         7c:b9:21:86:99:9d:d2:1d:e6:3a:da:81:15:e4:cf:cb:d8:48:
         bc:32:35:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:07 2026 by rpki-client